CVE-2025-61856
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
Stack-based buffer overflow vulnerability in VS6ComFile!CV7BaseMap::WriteV7DataToRom in V-SFT version 6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, abnormal end (ABEND), or arbitrary code execution.
Risk Assessment
An attacker could exploit the vulnerability to execute malicious code on the victim's machine, potentially leading to system compromise or data theft.
Recommendation
Update V-SFT to the latest patched version. Do not open V-SFT files from untrusted sources.
Other vulnerabilities in V-SFT
See all- CVE-2025-61864High
A use after free vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
- CVE-2025-61863High
An out-of-bounds read vulnerability exists in VS6ComFile!CSaveData::delete_mem of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
- CVE-2025-61862High
An out-of-bounds read vulnerability exists in VS6ComFile!get_ovlp_element_size of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
- CVE-2025-61861High
An out-of-bounds read vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
- CVE-2025-61860High
Out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default in V-SFT version 6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, abnormal end (ABEND), or arbitrary code execution.
- CVE-2025-61859High
Out-of-bounds write vulnerability in VS6ComFile!CItemDraw::is_motion_tween in V-SFT version 6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, abnormal end (ABEND), or arbitrary code execution.
- CVE-2025-61858High
An out-of-bounds write vulnerability exists in VS6ComFile!set_AnimationItem of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
- CVE-2025-61857High
An out-of-bounds write vulnerability exists in VS6ComFile!CItemExChange::WinFontDynStrCheck of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
Original NVD description (English source)
A stack-based buffer overflow vulnerability exists in VS6ComFile!CV7BaseMap::WriteV7DataToRom of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS